CVE-2026-83013
HighCVSS 8.8Summary
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable by low-privileged attacker via HTTP network access. Successful attack can lead to takeover of the system.
Risk Assessment
Risk of takeover of Oracle WebCenter Enterprise Capture, potentially compromising confidentiality, integrity, and availability.
Recommendation
Apply Oracle patches for affected versions. Restrict network access and monitor low-privileged user activity.
Other vulnerabilities in Oracle WebCenter Enterprise Capture
See all- CVE-2026-83022High
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It is difficult to exploit, requires access to the physical communication segment and user interaction. Successful attack can lead to takeover of the system.
- CVE-2026-83012High
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable by low-privileged attacker via HTTP network access. Can lead to unauthorized access to critical data and impact other products.
- CVE-2026-83010High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A high-privileged attacker with network access via HTTP can exploit it, but human interaction from another person is required. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data and full access to all product data.
- CVE-2026-83009High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily exploit it, leading to takeover of the product. Confidentiality, integrity, and availability impacts are high.
- CVE-2026-83008High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via T3 or IIOP can easily exploit it, leading to takeover of the product. Confidentiality, integrity, and availability impacts are high.
- CVE-2026-83007High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily exploit it, potentially impacting additional products (scope change). This can result in unauthorized access to and modification of critical data.
- CVE-2026-83005High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily exploit it, leading to takeover of the product. Confidentiality, integrity, and availability impacts are high.
- CVE-2026-83004High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with local logon to the infrastructure can exploit it, but human interaction is required. This can lead to unauthorized creation, deletion, or modification of critical data and full access to all product data.
- CVE-2026-83003High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via SOAP can easily exploit it, potentially impacting additional products (scope change). This can result in unauthorized access to and modification of critical data.
- CVE-2026-83339Critical
Vulnerability in the Oracle WebCenter Enterprise Capture product (component: Client Bundle) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to take over the system.
Original NVD description (English source)
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

